Which of the following is Static Testing?

• A. Dynamic Testing
• B. Penetration Testing
• C. Static Testing
• D. Fuzz Testing

Answer: (C)

Static testing examines software artifacts without running the program. It includes activities like code reviews, inspections, walkthroughs, and using static analysis tools that inspect source code, binaries, or design and requirements documents to spot defects, security gaps, or compliance issues. Because the code isn’t executed, you don’t observe runtime behavior, only the structure, syntax, and adherence to standards. This makes it effective for catching issues early in the development process and often at lower cost. In contrast, dynamic testing requires executing the application to observe how it behaves under real or simulated inputs, which is essential for uncovering runtime defects and security issues. Penetration testing and fuzz testing are dynamic approaches that involve interacting with the running system to reveal vulnerabilities. Therefore, static testing is the approach described.